Privacy policy
This Privacy Policy provides information about the processing of personal data through the JAGS website and, in particular, through its contact form.
I. DATA CONTROLLER
The controller responsible for personal data collected through this website is:
- Owner
- Juan Antonio Garcia Sostres
- Spanish tax ID (NIF)
- 52212268Z
- Public address
-
Cl. Olèrdola 45
08800 Vilanova i la Geltrú
Barcelona , España - Telephone
- +34 677 073 096
- Email address
- jagarciasostres@economistes.com
II. APPLICABLE LEGISLATION
Processing is carried out with regard to Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), where applicable.
III. DATA PROCESSED
The contact form allows the following categories of data provided by the user to be processed:
- Name.
- Company.
- Email address.
- Telephone number, when provided on an optional basis.
- Message content.
- A record of the privacy consent given to submit the enquiry.
The message field is free-form. Users must not include special categories of personal data or other sensitive information that is not necessary in order to deal with their enquiry.
The application may also process technical data strictly necessary for its operation and security, such as the IP address used for rate limiting and abuse prevention, session data, CSRF protection and technical information generated by the server where appropriate.
hCaptcha, a technology service provided by hCaptcha / Intuition Machines, is used to protect the form. It may process technical information needed to distinguish legitimate requests from automated ones, which may include technical browser or device information, challenge interactions and network metadata. The hCaptcha secret is never sent to the browser. The generated token is used solely for validation and is not stored by JAGS.
IV. PURPOSES OF PROCESSING
Data is processed exclusively for the following purposes:
- To receive, manage and respond to enquiries submitted through the form and to carry out reasonable follow-up of the communication.
- To protect the form and website, prevent abusive use and ensure their proper technical operation, including the use of hCaptcha.
- To show the practice’s location through Google Maps only when the user accepts external content.
V. LEGAL BASIS
The legal basis for processing data submitted through the form is the consent given by the user through the affirmative action of selecting the privacy checkbox and submitting the enquiry.
Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
This Privacy Policy is provided for information purposes. Merely accessing or using the website does not amount to consent to process an enquiry.
Technical and security processing, including hCaptcha, is used to apply measures necessary to protect the site and form from automated abuse. The specific legal basis and transfers associated with hCaptcha will be subject to final legal review in light of the service’s effective configuration.
Google Maps is optional external content. Its loading is based on the user’s consent through the preferences system and can be withdrawn at any time from “Cookie settings”.
VI. RETENTION
Data relating to an enquiry will provisionally be retained for 12 months or until the data subject requests its erasure, without prejudice to any retention required to meet applicable legal obligations or liabilities.
VII. RECIPIENTS AND PROCESSORS
Data will not be disclosed to third parties unless required by law. Technology providers necessary for the operation and security of the site may be involved under the applicable terms.
hCaptcha / Intuition Machines acts as a technology provider for the security and abuse prevention of the form. Google is involved only if the user accepts the loading of Google Maps to show the location.
The legal names of the providers will be added once the final hosting and email infrastructure has been confirmed.
VIII. INTERNATIONAL TRANSFERS
The use of external technology providers may involve processing of information outside the European Economic Area according to their infrastructure and applicable terms. Safeguards, countries and other details will be subject to legal review once provider documentation has been confirmed. No unverified safeguards or locations are stated.
IX. SECURITY
Technical and organisational measures proportionate to the nature of the data processed and the risks affecting the site are applied to preserve confidentiality, integrity and availability and to reduce the risk of unauthorised access, alteration, loss or disclosure. No measure can guarantee absolute security.
X. DATA SUBJECT RIGHTS
Data subjects may exercise the following rights on the terms provided by law:
- Access to their personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of their data.
- Restriction of processing.
- Objection to processing.
- Portability, where applicable.
- Withdrawal of consent at any time.
Requests may be sent to jagarciasostres@economistes.com or to the controller’s public address stated in this policy, identifying the right being exercised. Additional information necessary to verify identity may be requested only where there are reasonable doubts concerning the requester’s identity.
Data subjects may also lodge a complaint with the Spanish Data Protection Agency (AEPD):
XI. MINORS
The website and its contact form are intended for businesses and professionals and are not directed at minors. Minors must not provide data through the form without the legally required involvement or authorisation.
XII. THIRD-PARTY LINKS
The website may contain links to third-party pages. The controller does not control their privacy policies or processing activities, and users are therefore advised to consult the relevant website’s privacy information before providing personal data.
The “Directions” link voluntarily opens Google Maps in a new tab and is subject to that service’s terms and policies. Using it does not constitute global consent to JAGS cookies or external content.
XIII. INFORMATION, CONSENT AND CHANGES
This policy provides information about personal data processing carried out through the website. The consent required to submit and process an enquiry is requested separately in the form.
The Privacy Policy may be updated to reflect legal, technical or organisational changes. The version published at any given time will apply.
This website Privacy Policy document was created using the online privacy policy template generator on 14/08/2026.